CVE-2026-74001

CriticalCVSS 9.8

Published: 20/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 20/08/2026(UTC)NVD NIST

Summary

Unauthenticated broken authentication vulnerability in the User Registration & Membership Pro plugin. Affects versions up to 5.4.5.

An unauthenticated person can gain access to user accounts or hijack sessions, potentially leading to unauthorized data access.

Immediately update the User Registration & Membership Pro plugin to the latest version that fixes this vulnerability.

Original NVD description (English source)

Unauthenticated Broken Authentication in User Registration & Membership Pro <= 5.4.5 versions.